I removed "iptables -t nat -A POSTROUTING -o nm-netmain -j MASQUERADE" from postup/down on the extry point of the external clients (as advised) in order to be able to see the original IP and not the IP of the ingress server... but it didnt work. I restarted netmaker docker and I still see the ingress server IP on the firewall.